I have a work VPN, and this spike happens everytime I launch the VPN client (still connects fine). Any idea what’s happening, and what issues could arise from it?
This appears to be the VPN making the connection. Take a look at which domains are requested. If they are associated with the VPN service, that confirms it.
Initial connection. Doesnt seem like anything to worry about. Check the domains.
Your vpn client may terminate existing connections which may explain the surge, they will all try to reconnect after.
I know checkpoint vpn has the ability to do this.
Does this happen when you connect or when you launch the vpn client?
Lol my job’s VPN goes in the thousands of request when connecting
Maybe if your device is domain joined, once the client connects it’s checking in with AD DNS to see what domain controllers are available and updating various AD connections?
But yes as someone else suggested check the domains being checked surfing the spike.
it’ll be wpad and forcing dns over tunnel but not enforcing dns suffixes on the interfaces
my work laptop is by far the highest blocked dns on my network when it’s not connected to my work vpn… it’s hilarious and sad at the same time…
My work VPN does this… Anything other than going thru remote desktop doesn’t connect to the internet. Smh. Thinking of sandboxing it.
Interesting this must be it. Maybe some stupid network discovery hook.
Mine does the same thing. Spikes so bad my home connection Craps! Out for about 30 seconds
Sounds like they almost have a full tunnel setup. If you look at the client settings you can sometimes see what routes are configured. It’s sometimes called secured routes.
I have 4 different VPN clients installed on my work machine.